Cross site scripting

2006-04-0710:04:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.

CPENameOperatorVersion
skforumle1.5

CPE	Name	Operator	Version
	skforum	le	1.5

References

secunia.com/advisories/19484

www.osvdb.org/24430

www.osvdb.org/24431

www.osvdb.org/24432

www.securityfocus.com/bid/17389

www.vupen.com/english/advisories/2006/1260

exchange.xforce.ibmcloud.com/vulnerabilities/25641

pridels0.blogspot.com/2006/04/skforum-xss-vuln.html